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Introduction 



This document highlights the BIOS and software modifications 
required to fully support the K86™ family of processors, which 
includes the AMD-K5™ processor and the AMD-K6™ MMX™ 
enhanced processor. 

There can be more than one way to implement the functionality 
detailed in this document, and the information provided is for 
demonstration purposes. 



Audience 



It is assumed that the reader possesses the proper knowledge of 
the K86 processors, the x86 architecture, and programming 
requirements to understand the information presented in this 
document. 



Introduction 
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CPU Identification 
Algorithms 



The CPUID instruction provides complete information about 
the processor (vendor, type, name, etc.) and its capabilities 
(features). After detecting the processor and its capabilities, 
software can be accurately tuned to the system for maximum 
performance and benefit to users. For example, game software 
can test the performance level available from a particular 
processor by detecting the type or speed of the processor. If the 
performance level is high enough, the software can enable 
additional capabilities or more advanced algorithms. Another 
example involves testing whether the processor supports 
MMX™ technology. If the software finds this feature present 
when it checks the feature bits, it can utilize these more 
powerful instructions for better performance on new 
multimedia software. 

For more detailed information refer to the AMD Processor 
Recognition Application Note, order# #20734, located at 
http://www.amd.com 

Tables 1 and 2 outline the family codes and model codes for the 
AMD K86 processors. Table 1 shows the CPU speed, the 
‘P-Rating’, and the recommended BIOS boot-string associated 
with each AMD-K5 processor. 

Table 2 shows the recommended BIOS boot-string for the 
AMD-K6 MMX enhanced processor. This recommended 
boot-string is ‘AMD-K6(tm)/XXX’. The value for XXX is 



CPU Identification Algorithms 
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determined by calculating the core frequency of the processor. 
Use the Time Stamp Counter (TSC) to ‘clock 5 a timed operation 
and compare the result to the Real Time Clock (RTC) to 
determine the operating frequency. 

Note: Tables 1 and 2 contain information intended to prepare the 
infrastructure for potential future products. These products 
may or may not be announced, but BIOS software should be 
prepared to support these options. 



Table 1. Summary of AMD-K5™ Processor CPU IDs and BIOS Boot Strings 



Instruction 
Family Code 


km 


CPU Speed 
(MHz) 


CPU Bus 
Speed 
(MHz) 


Recommended 
BIOS Boot-String 


CPUID Functions 8000.0002, 3, 4 
Return Values 






75 


50 


AMD-K5-PR75 


undefined 




0 


90 


60 


AMD-K5-PR90 


undefined 






100 


66 


AMD-K5-PR100 


undefined 


5 


— 


90 


60 


AMD-K5-PR120 


AMD-K5(tm) Processor 


(AMD-K5™ Processor) 


H 


100 


66 


AMD-K5-PR133 


AMD-K5(tm) Processor 




9 


105 


60 


AMD-K5-PR150 


AMD-K5(tm) Processor 






116.7 


66 


AMD-K5-PR166 


AMD-K5(tm) Processor 




3 


133 


66 


AMD-K5-PR200 


AMD-K5(tm) Processor 



Table 2. Summary of AMD-K6™ MMX™ Enhanced Processor CPU IDs and BIOS Boot Strings 



Instruction 
Family Code 


Model 

Code 


CPU 

Speed 

(MHz) 


CPU Bus 
Speed 
(MHz) 


Recommended BIOS Boot-String Display 


5 

(AMD-K6™ MMX™ 
Enhanced Processor) 


6 


TBD 


60 


AMD-K6(tm)/XXX 


TBD 


66 


AMD-K6(tm)/XXX 
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3 

AMD-K5™ 

Processor 



The AMD-K5 processor is socket 7-compatible and 
software-compatible with the Pentium® processor. Compatible 
in this sense means the devices are pin-for-pin compatible and 
that the same software can be executed on both processors with 
no software modifications. 

The BIOS for the AMD-K5 processor requires minimal changes 
to fully support the AMD-K5 processor family. 

BIOS Consideration Checklist 



CPUID 



■ Use the CPUID instruction to properly identify the AMD-K5 
processor. 

■ Determine the processor type, stepping and features using 
functions 0000_0001h and 8000_0001h of the CPUID 
instruction. 

■ Boot-up display: The processor name is retrieved using 
CPUID extended functions 8000_0002h, 8000_0003h, and 
8000_0004h. See “CPU Identification Algorithms” on page 3 
for more information. 



AMD-K5™ Processor 
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CPU Speed Detection 

■ Use speed detection algorithms that do not rely on 
repetitive instruction sequences. 

■ Use the Time Stamp Counter (TSC) to ‘clock’ a timed 
operation and compare the result to the Real Time Clock 
(RTC) to determine the operating frequency. See the 
example of frequency-determination assembler code 
available on the AMD website at http://www.amd.com. 

■ Display the P-Rating shown in Table 1, “Summary of 
AMD-K5™ Processor CPU IDs and BIOS Boot Strings,” on 
page 4. 

Model-Specific Registers (MSRs) 

■ Access only MSRs implemented in the AMD-K5 processor. 

■ Program the write allocate registers — Hardware 

Configuration Register (HWCR), Write Allocate 

Top-of-Memory and Control Register (WATMCR), and Write 
Allocate Programmable Memory Range Register 

(WAPMRR). See “Write Allocate Registers” on page 82 and 
the Implementation of Write Allocate in the K86 ™ Processors 
Application Note, order# 21326 for more information. 



Cache Testing 

■ Perform cache testing on the AMD-K5 processor using the 
Array Access Register MSR. See “Array Access Register 
(AAR)” on page 28 for more information. 

SMM Issues 

■ The System Management Mode (SMM) functionality of the 
AMD-K5 processor is identical to Pentium. 

■ Implement the AMD-K5 processor SMM state-save area in 
the same manner as Pentium except for the IDT Base and 
possibly Pentium processor-reserved areas. See “AMD-K5™ 
Processor System Management Mode (SMM)” on page 7 for 
more information. 
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AMD-K5™ Processor System Management Mode (SMM) 



System Management Mode (SMM) is an alternate operating 
mode entered by way of a system management interrupt (SMI) 
and handled by an interrupt service routine. SMM is designed 
for system control activities such as power management. These 
activities appear transparent to conventional operating 
systems like DOS and Windows. SMM is primarily targeted for 
use by the Basic Input Output System (BIOS) and specialized 
low-level device drivers. The code and data for SMM are stored 
in the SMM memory area, which is isolated from main memory. 

The processor enters SMM by the system logic’s assertion of the 
SMI# interrupt and the processor’s acknowledgment by the 
assertion of SMIACT#. At this point the processor saves its 
state into the SMM memory state-save area and jumps to the 
SMM service routine. The processor returns from SMM when it 
executes the RSM (resume) instruction from within the SMM 
service routine. Subsequently, the processor restores its state 
from the SMM save area, de-asserts SMIACT#, and resumes 
execution with the instruction following the point where it 
entered SMM. 

The following sections summarize the SMM state-save area, 
entry into and exit from SMM, exceptions and interrupts in 
SMM, memory allocation and addressing in SMM, and the SMI# 
and SMIACT# signals. 

Operating Mode and Default Register Values 

The software environment within SMM has the following 
characteristics: 

■ Addressing and operation in Real mode 

■ 4-Gbyte segment limits 

■ Default 16-bit operand, address, and stack sizes, although 
instruction prefixes can override these defaults 

■ Control transfers that do not override the default operand 
size truncate the EIP to 16 bits 

■ Far jumps or calls cannot transfer control to a segment with 
a base address requiring more than 20 bits, as in Real mode 
segment-base addressing 



AMD-K5™ Processor 
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■ A20M# is masked 

■ Interrupt vectors use the Real-mode interrupt vector table 

■ The IF flag in EFLAGS is cleared (INTR not recognized) 

■ The TF flag in EFLAGS is cleared 

■ The NMI and INIT interrupts are disabled 

■ Debug register DR7 is cleared (debug traps disabled) 

Figure 1 shows the default map of the SMM memory area. It 
consists of a 64-Kbyte area, between 0003_0000h and 
0003_FFFFh, of which the top 32 Kbytes (0003_8000h to 
0003_FFFFh) must be populated with RAM. The default 
code-segment (CS) base address for the area — called the SMM 
base address — is at 0003_0000h. The top 512 bytes 
(0003_FE00h to 0003_FFFFh) contain a fill-down SMM 
state-save area. The default entry point for the SMM service 
routine is 0003_8000h. 



Fill Down 

I 



Service Routine Entry Point 



SMM Base Address (G) 



SMM 

State-Save 

Area 



SMM 

Service Routine 



0003_FFFFh 

0003_FE00h 



0003_8000h 



0003_0000h 



32-Kbyte 
Minimum RAM 



Figure 1. SMM Memory 
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SMM Initial Register Values 

Table 3 shows the initial state of registers when entering SMM. 



Table 3. Initial State of Registers in SMM 



Register 


Initial Contents 


Selector 


Base 


Limit 


CS 


3000h 


0003_0000h 


4 Gbytes 


DS 


ooooh 


0000_0000h 


4 Gbytes 


ES 


ooooh 


0000_0000h 


4 Gbytes 


FS 


ooooh 


0000_0000h 


4 Gbytes 


GS 


ooooh 


0000_0000h 


4 Gbytes 


SS 


ooooh 


0000_0000h 


4 Gbytes 


General-Purpose Registers 


Unmodified 


EFLAGS 


0000_0002h 


EIP 


0000_8000h 


CRO 


Bits 0, 2, 3, and 31 cleared (PE, EM, TS, and PG); remainder are unmodified 


CR4 


0000_0000h 


GDTR 


Unmodified 


LDTR 


Unmodified 


IDTR 


Unmodified 


TR 


Unmodified 


DR7 


0000_0400h 


DR6 


Undefined 



SMIVI State-Save Area 

When the processor acknowledges an SMI interrupt by 
asserting SMIACT#, it saves its state in the 512-byte SMM 
state-save area shown in Table 4. The save begins at the top of 
the SMM memory area (SMM Base Address + FFFFh) and fills 
down to SMM base address + FEOOh. 

Table 4 shows the offsets in the SMM state-save area relative to 
the SMM base address. The SMM service routine can alter any 
of the read and write values in the state-save area. The contents 
of any reserved locations in the state-save area are not 
necessarily the same between the AMD-K5 processor and 
Pentium or 486 processors. 
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Table 4. SMM State-Save Area Map 



Offset (Hex) 


Contents 


FFFC 


CRO 


FFF8 


CR3 


FFF4 


EFLAGS 


FFFO 


EIP 


FFEC 


EDI 


FFE8 


ESI 


FFE4 


EBP 


FFEO 


ESP 


FFDC 


EBX 


FFD8 


EDX 


FFD4 


ECX 


FFDO 


EAX 


FFCC 


DR6 (FFFF_CFF3h) 


FFC8 


DR7 


FFC4 


TR 


FFCO 


LDTR 


FFBC 


GS 


FFB8 


FS 


FFB4 


DS 


FFBO 


SS 


FFAC 


CS 


FFA8 


ES 


FFA4 


I/O Trap Dword 


FFAO 


reserved 


FF9C 


I/O Trap EIP 


FF98 


reserved 


FF94 


reserved 


FF90 


IDT Base 


FF8C 


IDT Limit 


FF88 


GDT Base 


FF84 


GDT Limit 


FF80 


TSS Attributes 


FF7C 


TSS Base 


FF78 


TSS Limit 



10 



AMD-K5 ™ Processor 






21 062E/0— June 1997 



Preliminary Information AMDH 

AMD K86 m Family BIOS and Software Tools Developers Guide 



Table 4. SMM State-Save Area Map (continued) 



v Offset (Hex) 


Contents 


FF74 


LDT Attributes 


FF70 


LDT Base 


FF6C 


LDT Limit 


FF68 


GS Attributes 


FF64 


GS Base 


FF60 


GS Limit 


FF5C 


FS Attributes 


FF58 


FS Base 


FF54 


FS Limit 


FF50 


DS Attributes 


FF4C 


DS Base 


FF48 


DS Limit 


FF44 


SS Attributes 


FF40 


SS Base 


FF3C 


SS Limit 


FF38 


CS Attributes 


FF34 


CS Base 


FF30 


CS Limit 


FF2C 


ES Attributes 


FF28 


ES Base 


FF24 


ES Limit 


FF20 


reserved 


FFlC 


reserved 


FF18. 


reserved 


FF14 


CR2 


FF10 


CR4 


FFOC 


I/O Restart ESI 


FF08 • 


I/O Restart ECX 


FF04 


I/O Restart EDI 


FF02 


Halt Restart Slot 


FFOO 


I/O Trap Restart Slot 


FEFC 


SMM Revision Identifier 


FEF8 


SMM Base Address 


FE00-FEF4 


reserved 
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SMM Revision Identifier 

The SMM revision identifier at offset FEFCh in the SMM 
state-save area specifies the version of SMM and the extensions 
available on the processor. The SMM revision identifier fields, 
shown in Table 5, are as follows: 

■ Bits 31-18 — reserved 

■ Bit 1 7 — SMM base address relocation (always 1 = enabled) 
m Bit 16 — I/O trap restart (always 1 = enabled) 

■ Bits 15-0 — SMM revision level = 0000 



Table 5. SMM Revision Identifier Fields 



Bits 31-18 


Bit 17 


Bit 16 


Bits 15-0 


Reserved 


SMM Base Relocation 


I/O Trap Extension 


SMM Revision Level 


0 


1 


1 


0000 



Note: The I/O trap restart and the SMM base address relocation 
functions are always enabled in the AMD-K5 processor and 
do not need to be specifically enabled. 

SMM Base Address 

During RESET, the processor sets the code-segment (CS) base 
address for the SMM memory area — the SMM base address — 
to its default, 0003_0000h. The SMM base address at offset 
FEF8h in the SMM state-save area can be changed by the SMM 
service routine to any address aligned to a 32-Kbyte boundary. 
(Locations not aligned to a 32-Kbyte boundary cause the 
processor to enter the Shutdown state when executing the RSM 
instruction.) 

In some operating environments it may be desirable to relocate 
the 64-Kbyte SMM memory area to a high memory area to 
provide more low memory for legacy software. During system 
initialization, the base of the 64-Kbyte SMM memory area is 
relocated by the BIOS. To relocate the SMM base address, the 
system enters the SMM handler at the default address. This 
handler changes the SMM base address location in the SMM 
state-save area, copies the SMM handler to the new location, 
and exits SMM. 
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The next time SMM is entered, the processor saves its state at 
the new base address. This new address is used for every SMM 
until the SMM base address in the SMM state-save area is 
changed or a hardware reset occurs. 

Auto Halt Restart Slot 

During entry into SMM, the halt restart slot at offset FF02h in 
the SMM state-save area indicates whether SMM was entered 
from the Halt state. Before returning from SMM, the halt 
restart slot can be written to by the SMM service routine to 
specify whether the return from SMM should take the 
processor back to the Halt state or to the instruction-execution 
state specified by the SMM state-save area. 

On entry into SMM, the halt restart slot is configured as 
follows: 

■ Bits 15-1 — Undefined 

■ Bit 0 — Point of entry to SMM: 

1 = entered from Halt state 

0 = not entered from Halt state 

After entry into the SMI handler and before returning from 
SMM, the halt restart slot can be written using the following 
definition: 

■ Bits 15-1 — Undefined 

■ BitO — Point of return from SMM 

1 = return to Halt state 

0 = return to state specified by SMM state-save area 

If the return from SMM takes the processor back to the Halt 
state, the HLT instruction is not re-executed, but the Halt 
special bus cycle is driven on the bus after the return. 
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I/O Trap Dword 



If the assertion of SMI is recognized on the boundary of an I/O 
instruction, the I/O trap dword at offset FFA4h in the SMM 
state-save area contains information about the instruction. The 
fields of the I/O trap dword, shown in Table 6, are configured as 
follows: 

■ Bits 31-16 — I/O port address 

■ Bit 15 — I/O string operation (1 = string, 0 = non-string) 

■ Bits 14-2 — reserved 

m Bit 1 — Valid I/O instruction (1 = valid, 0 = invalid) 

■ Bit 0 — Input or output instruction (1 = INx, 0 = OUTx) 



Table 6. I/O Trap Dword Fields 



Bits 31-16 


Bit 15 


Bit 14-2 


Bit 1 


BitO 


I/O Port Address 


I/O String Operation 


Reserved 


Valid I/O Instruction 


Input or Output 



The I/O trap dword is related to the I/O trap restart slot, 
described below. Bit 1 of the I/O trap dword (the valid bit) 
should be tested if the I/O trap restart slot is to be changed. 

I/O Trap Restart Slot 

The I/O trap restart slot at offset FFOOh in the SMM state-save 
area specifies whether the trapped I/O instruction should be 
re-executed on return from SMM. This slot in the state-save 
area is called the I/O instruction restart function. Re-executing 
a trapped I/O instruction is useful, for example, if an I/O write 
occurs to a disk that is powered down. The system logic 
monitoring such an access can assert SMI#. Then the SMM 
service routine can query the system logic, detect a failed I/O 
write, take action to power-up the I/O device, enable the I/O 
trap restart slot feature, and return from SMM. 
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The fields of the I/O trap restart slot are defined as follows: 

■ Bits 31-16 — reserved 

m Bits 15-0 — I/O instruction restart on return from SMM: 

OOOOh = execute the next instruction after the trapped 
I/O instruction 

OOFFh = re-execute the trapped I/O instruction 



Table 7 shows the format of the I/O trap restart slot. 

Table 7. I/O Trap Restart Slot 



31-16 


15-0 


Reserved 


I/O Instruction restart on return from SMM: 

■ OOOOh = execute the next instruction after the trapped I/O 
instruction 

■ OOFFh = re-execute the trapped I/O instruction 



The processor initializes the I/O trap restart slot to OOOOh upon 
entry into SMM. If SMM is entered as a result of a trapped I/O 
instruction, the processor indicates the validity of the I/O 
instruction by setting or clearing bit 1 of the I/O trap dword at 
offset FFA4h in the SMM state-save area. The SMM service 
routine should test bit 1 of the I/O trap dword to determine if a 
valid I/O instruction was being executed when entering SMM 
and before writing the I/O trap restart slot. If the I/O instruction 
is valid, the SMM service routine can safely rewrite the I/O trap 
restart slot with the value OOFFh, causing the processor to 
re-execute the trapped I/O instruction when the RSM 
instruction is executed. If the I/O instruction is invalid, writing 
the I/O trap restart slot has undefined results. 

If a second SMI# is asserted and a valid I/O instruction was 
trapped by the first SMM handler, the CPU services the second 
SMI# prior to re-executing the trapped I/O instruction. The 
second entry into SMM never has bit 1 of the I/O trap dword set, 
and the second SMM service routine must not rewrite the I/O 
trap restart slot. 

During a simultaneous SMI# I/O instruction trap and debug 
breakpoint trap, the AMD-K5 processor first responds to the 
SMI# and postpones recognizing the debug exception until 
after returning from SMM via the RSM instruction. If the debug 
registers DR3-DR0 are used while in SMM, they must be saved 
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and restored by the SMM handler. The processor automatically 
saves and restores DR7-DR6. If the I/O trap restart slot in the 
SMM state-save area contains the value OOFFh when the RSM 
instruction is executed, the debug trap does not occur until 
after the I/O instruction is re-executed. 

Exceptions and Interrupts in SMM 

When SMM is entered, the processor disables both INTR and 
NMI interrupts. The processor disables INTR interrupts by 
clearing the IF flag in the EFLAGS register. To enable INTR 
interrupts within SMM, the SMM handler must set the IF flag to 
1 . 

Generating an INTR interrupt is a method for unmasking NMI 
interrupts in SMM. The processor recognizes the assertion of 
NMI within SMM immediately after the completion of an IRET. 
The NMI can thus be enabled by using a dummy INTR 
interrupt. Once NMI is recognized within SMM, NMI 
recognition remains enabled until SMM is exited, at which 
point NMI masking is restored to the state it was in before 
entering SMM. 

Because the IF flag is cleared when entering SMM, the HLT 
instruction should not be executed in SMM without first setting 
the IF bit to 1. Setting this bit to 1 enables the processor to exit 
the Halt state by means of an INTR interrupt. 

Table 8 summarizes the behavior of all interrupts in SMM. 
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